You have found a SQL injection vulnerability in a login function, and you try to use the input ‘ or 1=1-- to bypass the login. Your attack fails and the resulting error message indicates that the -- characters are being stripped by the application’s input filters. How could you circumvent this problem?
1. You have found a SQL injection vulnerability in a login function, and you try to use the input ‘ or 1=1-- to bypass the login. Your attack fails and the resulting error message indicates that the -- characters are being stripped by the application’s input filters. How could you circumvent this problem?
please help me to solve this in correct.
this answer was wrong that published which was (Well there is another possibility of using OR 1=1 after the query instead of using -- at the last since it has been filtered out by the application's input filters. Otherwise we can also use 1 =' 1. Thanks.)
i ask my teacherso so I want correct answer for this Q so I want a clear answer ith details and tha nks a lot.
Trending now
This is a popular solution!
Step by step
Solved in 2 steps with 1 images
